Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign
A phishing campaign uses Google Calendar invites and trusted redirects to capture live Google sessions; researchers took down 897 domains.
More info